CVE-2026-7606
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A weakness was identified in TRENDnet TEW-821DAP 1.12B01 in the find_hwid/new_gui_update_firmware function of the Firmware Update Handler. Manipulating the dest argument leads to insufficient verification of data authenticity. The attack can be launched remotely but is highly complex and difficult to exploit.
Risk Assessment
As with the related vulnerability, the product has been EOL for 8 years, meaning no support or fixes. Organizations still using the device are exposed to attacks requiring high skill.
Recommendation
Replace the device with a supported model since the vendor will not provide updates. Until replacement, restrict network access to the firmware update interface.
Other vulnerabilities in TRENDnet TEW-821DAP
See all- CVE-2026-77946Critical
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05 in the uci_safe_get function of /cgi-bin/apply_time.cgi in the NTP Timezone Configuration Handler. Manipulating the system.ntp.server, system.ntp.enable_server, cameo.time.time_zone, and cameo.cameo.syslog_server arguments leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2026-7609Medium
A flaw was found in TRENDnet TEW-821DAP up to 1.12B01 in the tools_diagnostic function of /tmp/diagnostic (Firmware Update component). Manipulation causes OS command injection, remotely exploitable. The exploit is public; the product was EOL 8 years ago and is unsupported.
- CVE-2026-7608Medium
A vulnerability was detected in TRENDnet TEW-821DAP up to version 1.12B01 in the tools_diagnostic function, allowing OS command injection. The exploit is publicly available and may be used. The vendor states the product was EOL 8 years ago and is no longer supported.
- CVE-2026-77945High
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05 in an unknown function of /cgi-bin/upload.cgi in the ssi component. Manipulating the filename argument results in command injection. The attack can be initiated remotely, and the exploit has been made public.
- CVE-2026-76582High
In TRENDnet TEW-821DAP version 2.2.01b05, a command injection vulnerability exists in the popen/system function of the file /cgi-bin/ping.cgi in the ssi component. Manipulating the ipaddr argument can lead to command injection. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2026-15487Medium
A vulnerability was found in TRENDnet TEW-821DAP version 1.11B03, affecting the function sub_41FBD0 in the file /goform/system_ntp. Remote manipulation of the Hostname argument allows OS command injection. The vendor states the device is end-of-life (EOL) and will not receive patches.
- CVE-2026-15486Medium
A vulnerability was found in TRENDnet TEW-821DAP firmware version 1.11B03, allowing OS command injection via the hostname, username, and password parameters in the /goform/tools_ddns file. The attack can be performed remotely, and the vendor states the device is end-of-life (EOL).
- CVE-2026-15485Medium
A flaw in TRENDnet TEW-821DAP version 1.11B03 allows OS command injection via the sub_43F2C4 function in /goform/tools_nslookup. The attack is remotely exploitable by manipulating the nslookup_target or dns_server arguments. The vendor states the device is end-of-life (EOL) and will not receive patches.
- CVE-2026-15484High
A buffer overflow vulnerability was found in the TRENDnet TEW-821DAP version 1.12B01 in the sub_41EC14 function of the /goform/tools_nslookup file within the ssi component. The attack can be launched remotely. The vendor states the device is End-of-Life (EOL) and will not be patched.
- CVE-2026-15483High
A buffer overflow vulnerability has been detected in TRENDnet TEW-821DAP version 1.12B01 in the sub_41EC14 function of the /goform/tools_nslookup file within the ssi component. An attacker can remotely exploit this by manipulating the nslookup_target argument. The vendor states the device is End-of-Life (EOL) and will not issue patches.
Original NVD description (English source)
A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS